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DETAILED ACTION 

1. Claims 1-14 are pending in this application and presented for examination. 

Claim Rejections - 35 USC § 103 

2. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 

obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

3. Claims 1-14 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Tripunitara et al. (Tripunitara), U.S. Patent No. 6,771 ,649 B1 , in view of Akgun et al. 
(Akgun), U.S. Patent No. 7,039,049 B1. 

4. As to claim 1 , Tripunitara discloses a method of using a networking subsystem to 
prevent spoofing of an address resolution cache of a host computer (Col. 3, In. 3-14), 
the method comprising: 

said networking subsystem receiving an unsolicited message from a network that 
submits a new address resolution for a network protocol address (Col. 5, In. 33-35 and 
53-55); 

said networking subsystem checking independently cached address resolution 
information (Col. 2, In. 19-24; Col. 5, In. 34-46); 
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in response to determining that cached address resolution information for said 
network protocol address has an old address resolution which differs from said new 
address resolution (Col. 5, In. 51-53 and 65-67), said networking subsystem issuing a 
request for network elements having said network protocol address to reply with 
address resolution information (Col. 5, In. 46-55); 

in response to determining that no reply messages confirm that a network 
element has said old address resolution (Col. 5, In. 32-40), said networking subsystem 
permitting at least one message to pass onto said host computer which includes said 
new address resolution (Col. 5, In. 32-40); and 

in response to receiving a reply message that confirms a network element has 
said old address resolution (Col. 5, In. 46-55), said networking subsystem blocking at 
least one message which include said new address resolution from passing onto said 
host computer (Col. 5, In. 41-46); 

wherein said networking subsystem protects said host computer from spoofed 
address resolution messages (Col. 1, In. 19-31; Col. 2, In. 19-24). 

Tripunitara may be interpreted as disclosing a firewall, as a "dynamic packet 
filter" is shown in Fig. 2. However, Tripunitara does not use the term "firewall." 

However, Akgun discloses a firewall (Abstract, In. 10-11). 

It would have been obvious to one of ordinary skill in the art at the time of the 
invention to modify the teachings of Tripunitara by using a firewall as taught by Akgun in 
order to place an intermediary device in between incoming communications and host 
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computers, for the purpose of providing an extra layer of security for the host 
computers. 

5. As to claim 2, Tripunitara and Akgun disclose the invention substantially as in 
parent claim 1, including said network implements a LAN network running Internet 
Protocol using the Address Resolution Protocol (ARP) for resolving medium access 
control (MAC) addresses, and said address resolution cache is an ARP cache mapping 
IP addresses to MAC addresses (Tripunitara: Col. 3, In. 15-37). 

Tripunitara and Akgun do not explicitly define the use of IPv4. However, Official 
Notice is taken that IPv4 is extremely well known in the art and the standard for IP 
communications in LAN and Internet communications. 

It would have been obvious to one of ordinary skill in the art at the time of the 
invention to modify the teachings of Tripunitara and Akgun by using the well-known IPv4 
in order to implement a pre-defined standard for network communications, for the 
purpose of maximizing the compatibility with other networking elements. 

6. As to claim 3, the claim is rejected for the same reasons as claim 2 above. IPv6 
with Neighbor Discovery is extremely well known in the art. It would have been obvious 
to one of ordinary skill in the art at the time of the invention to modify the teachings of 
Tripunitara and Akgun by using IPv6 with Neighbor Discovery in order to implement a 
pre-defined standard for network communications, for the purpose of maximizing the 
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compatibility with other networking elements, and in order to add the capacity for a 
greater number of host addresses and the greater security of IPv6. 

7. As to claims 4, 7-8, and 10-11, the claims are rejected for the same reasons as 
claim 1 above. 

8. As to claims 5 and 13, the claims are rejected for the same reasons as claim 2 
above. 

9. As to claims 6 and 14, the claims are rejected for the same reasons as claim 3 
above. 

10. As to claim 9, Tripunitara and Akgun disclose the invention substantially as in 
parent claim 4, including storing cache entries with a residency lifetime greater than in 
said address resolution cache (Tripunitara: Col. 5, In. 65 - Col. 6, In. 3). 

11. As to claim 12, the claim is rejected for the same reasons as claim 9 above. 

Conclusion 

12. The prior art made of record and not relied upon is considered pertinent to 
applicant's disclosure. See the Notice of References Cited (PTO-892). 
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1 3. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Brian P. Whipple whose telephone number is (571) 270- 
1244. The examiner can normally be reached on Mon-Fri (8:30 AM to 5:00 PM EST). 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Bunjob Jaroenchonwanit can be reached on (571) 272-3913. The fax 
phone number for the organization where this application or proceeding is assigned is 
571-273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 




